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BACKGROUND OF THE INVENTION 

[0001] The present invention relates to a method for controlling 
a process according to which an actuation parameter is produced 
depending on a control deviation that is determined by comparing a 
nominal value with an actual value of a control variable. 

[0002] The method is especially suitable for implementing 
driving stability control for a vehicle. 

[0003] The term , driving stability control' integrates several 
principles for influencing the driving performance of a vehicle by 
predefinable pressures in or brake forces at individual wheel 
brakes, intervention into the engine management, superposition of 
an additional steering angle on a steering angle adjusted by a 
driver, and intervention into absorbers at the wheels or 
stabilizers at the axles. Embodiments of driving dynamics control 
imply in particular brake slip control operations (ABS) which 
prevent individual wheels from locking during a braking operation, 
anti-slip control operations or traction control operations (TCS) 
preventing the spinning of the driving wheels, electronic brake 
force boosting (EBD) for controlling the relationship between the 
brake force on the front and rear axles, roll-over prevention 
operations (ARP) to prevent roll-over of a vehicle about its 
longitudinal axis, and yaw torque control (ESP) for stabilizing 
the vehicle. 
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[0004] A driving stability controller which, in addition, 
includes a limitation of a reference yaw rate responsive to the 
coefficient of friction is e.g. disclosed in German published 
application DE 195 15 059 which is herein referred to in its full 
scope. The illustrated control circuit relates to a motor vehicle 
with four wheels that is equipped with a hydraulic, electro- 
hydraulic or electro-mechanical brake system. The driver builds up 
brake pressure by means of a pedal-operated master cylinder in 
hydraulic brake systems, while the electro-hydraulic and electro- 
mechanical brake systems develop a brake force in response to a 
sensed braking request of a driver. Reference will be made to a 
hydraulic brake system in the following. 

[0005] To detect driving-dynamics conditions, the controller is 
provided with a rotational speed sensor for each wheel, a yaw rate 
sensor, a lateral acceleration sensor, and a pressure sensor for 
sensing the brake pressure produced b means of a brake pedal. 

[0006] A fallback mode for the controller is typically realized 
when using a sensor cluster composed of several sensors so that in 
case one part of the sensor system fails only that component of 
the control will be respectively disabled which requires measured 
values from the failed sensors as input quantities. 

[0007] A sensor cluster for implementing driving dynamics 
control is e.g. described also in German published patent 
application DE 198 11 547. 

[0008] The function of the sensors can be monitored by 
plausibility tests based on analytic redundancies. Usually several 
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sensor values of equal physical quantities are determined by way 
of signals and compared with each other. 

[0009] Likewise arrangements to protect sensors are known from 
the state of the art. Thus, German published patent application DE 
199 21 692 Al, which shall be included herein also in its full 
scope, discloses an arrangement for protecting electronic function 
units against disturbances, wherein the function units are 
classified into components of different sensitivity in relation to 
spurious signals. Different types of shields are provided for 
these components, and at least two of the shields add to become a 
shield having a higher efficiency than the individual shields. 

[0010] It is, thus, possible to detect the occurrence of defects 
in the sensor system, or to virtually avoid them, respectively. 
The fallback modes further prevent that an erroneous control 
operation is performed where safety-critical values of actuation 
parameters could develop. 

[0011] It is, nevertheless, desirable in many cases to maintain 
the control function upon failure of a sensor. This applies in 
particular for driving stability control operations which serve to 
enhance the safety in a vehicle. 

[0012] Even after a successful introduction of a technical 
control system on the market there is often the desire to 
economize sensors. The system functionality should, however, be 
safeguarded in an appropriate fashion even after the omission of 
sensors . 

SUMMARY OF THE INVENTION 
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[0013] In view of the above, an object of the invention is to be 
able to control a process reliably and safely even if there is no 
signal of a sensor that represents the value of a control 
variable . 

[0014] According to the invention, this object is achieved by a 
method of controlling process that includes determining a control 
deviation, determining a need for control, determining a control 
variable, and verifying the need for control based on the control 
variable . 

[0015] The invention provides that a method for controlling a 
process, according to which a need for control is determined 
depending on a control deviation determined by comparing a nominal 
value with an actual value of a control variable, is implemented 
in such a fashion that the actual value of the control parameter 
is determined by way of a first process model and the need for 
control is additionally verified by determining control 
requirements based on values of the control variable, which values 
are defined by way of additional process models and linked to each 
other by logical operations. 

[0016] Thus, the invention provides a method that permits 
preserving a control function even upon failure or omission of a 
sensor signal. The special advantage involved with the method is 
that erroneous control interventions are avoided which can be 
caused by malfunctions of the remaining sensors. 

) 

[0017] It is the basic idea of the invention that a signal 
representative of the actual value of the control variable is 
reproduced in a suitable model and the need for control is 
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verified by way of additional models which, admittedly, are less 
appropriate for the quantitative reproduction of the value of the 
control variable than the first model, each one of which, however, 
is less susceptible to errors in the measured variables. 

[0018] In a preferred embodiment of the method of the invention, 
the additional process models are therefore produced with 
different subsets of a multitude of measured variables. It is 
thereby ensured that the additional process models are constructed 
irrespective of at least one measured variable and, hence, each of 
the partial models remains unaffected by at least one error of 
measurement . 

[0019] In this arrangement, the values of the control variable 
are preferably determined by way of at least two additional 
process models. Thus, there is an analytic redundancy constituted 
of at least two values for the value of the control variable, 
which is taken into account for a well-founded assessment of the 
need for control. 

[0020] As they are generally produced with fewer variables than 
the first process model, the additional process models are less 
complex than the first model and, hence, permit a less precise 
reproduction of the measuring signal of the control variable than 
the first model. However, the invention offers the possibility of 
verifying the necessity of a control intervention by way of the 
additional models. 

[0021] In a favorable embodiment of the method, a need for 
control is detected only if there is a need for control for the 
majority of the additional process models. 
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[0022] This control intervention can then take place in such a 
manner that the value of an actuation parameter is determined 
alone from the control deviation between the actual value of the 
control variable established by way of the first process model and 
the nominal value. A control intervention of this type is referred 
to as an unlimited control intervention in the following. 

[0023] To minimize the consequences of a possibly incorrect 
assessment of a need for control, it is favorably arranged for 
that an unlimited control intervention is only performed when 
there is a need for control for all additional process models. 

[0024] If there is a need for control for the majority, yet not 
for all, of the process models, it is arranged for in a preferred 
embodiment of the method of the invention that a control 
intervention has a duration that is reduced in comparison with an 
unlimited intervention or has an intensity that is reduced in 
comparison with an unlimited intervention. Control interventions 
of this type are referred to as limited control interventions in 
the following. 

[0025] In addition, many control systems include the possibility 
of determining the situation of a total process by way of 
individual measured values or by way of the time variation of 
measuring signals. These control system are hence enabled to judge 
the quality of individual measuring signals in response to a 
situation. Further, many control systems include a configuration 
in which a control of actuators influences the measuring signals. 
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[0026] As the actuators are controlled by the control system 
itself, it is possible to have the quality of the measuring 
signals judged by the control system also in this case. This means 
that a situation-responsive judgment of the reliability of the 
different process models can be performed in the described control 
systems . 

[0027] When a defined process model proves especially reliable 
in a situation, it is favorable that the control of the process by 
way of this model is not only performed qualitatively 
corresponding to the previously described embodiments of the 
method of the invention but also quantitatively depending on the 
value of the control variable determined in this model. 

[0028] In another preferred embodiment of the method, the value 
of the actuation parameter which is produced by the controller in 
a case of need for control is therefore modified depending on at 
least one value of the control variable that is determined by way 
of the additional process models. 

[0029] The method of the invention includes the advantage that 
it can be implemented without basic modifications both in a stand- 
alone system and within an emergency running function of an 
existing system. 

[0030] The employment of the method at issue renders it possible 
to realize an emergency running logic which is largely based on 
the functions of the standard system. 
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BRIEF DESCRIPTION OF THE DRAWING 

[0031] Further advantages and suitable improvements of the 
invention can be taken from the following embodiments of the 
invention illustrated by way of the only Figure. 

[0032] The Figure shows a sketch depicting the principle of the 
invention of the combined consideration of standard logic and 
partial models. 

DETAILED DESCRIPTION OF THE DRAWING 

[0033] The invention provides a favorable method for controlling 
a process. It discloses that the actual value of a control 
variable is determined in a model and verified by means of a 
multiple process model because analytic redundancies for the value 
of the control variable are produced from process measured 
variables and process command variables, and the actual value is 
assessed by way of an evaluation and logical operation of the 
redundancies. 

[0034] The method is especially appropriate to perform a driving 
stability control operation for a vehicle. As an example for an 
embodiment of the method of the invention, a driving dynamics 
control operation will be described in the following which is 
performed without the signals of a yaw rate sensor. However, it is 
also possible to apply the method without any basic modifications 
in the event of omission of other sensors. 

[0035] An application in optional control systems which allow 
producing corresponding substitute signals is also possible 
without any problems. Analytic redundancies must be determined in 
the respective systems for this purpose, which exist for the 
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process to be controlled based on different process models or 
based on different partial models, and the individual models must 
be evaluated with regard to their reliability. After the 
evaluation of the models, a model must then be found in which the 
actual value of the control variable on which the control 
interventions found is determined, and those models must be found 
which allow verifying the need for control by logical operations 
of the control requirements established in these models. 

[0036] On the one hand, the implementation of the method of the 
invention within the limits of driving dynamics control for a 
vehicle can be realized as a stand-alone solution, as will be 
described in the following. It is hence possible to carry out yaw 
torque control in the absence of a yaw rate sensor. 

[0037] On the other hand, the control can also be integrated as 
an emergency running function into an existing system for driving 
dynamics control, as has e.g. been described in the published 
patent application DE 195 15 059 Al . 

[0038] The driving dynamics control without a yaw rate sensor 
which can be performed by way of the method of the invention 
employs functions and sensors which are available in prior art 
control systems for implementing an Electronic Stability Program 
(ESP) . These functions and sensors can be seen in published patent 
application DE 195 15 059 Al. Reference is being made within the 
full scope of this publication. 

[0039] Besides, a sensor cluster connection can be employed 
according to published patent application DE 199 21 692 and 
published patent application DE 198 11 547. 
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[0040] The basic input variables of a system of this type being 
measured by corresponding sensors are the steering angle 5, the yaw 
rate if/, the lateral acceleration a LA T and the wheel speeds v FL , v FR , 
Vrl/ v rr . Considering the wheel speeds, v FL refers to the speed of 
the left front wheel, v FR refers to the speed of the right front 
wheel, designates the speed of the left rear wheel and v RR the 
speed of the right rear wheel. 

[0041] In a preferred embodiment of the ESP control, a control 
deviation is determined between the measured actual value of the 
yaw rate y/ and a nominal value that is established based on the 

measured values of the steering angle 5, of the wheel speeds v FL , 
v FR , v RL and v RR as well based on vehicle parameters p in a 
reference model of the vehicle. From this control deviation, a 
brake pressure for each wheel and an intervention into the engine 
management are determined, which cause a compensating yaw torgue 
that adapts the yaw rate if/ of the vehicle to its nominal value. 

[0042] Depending on the prevailing coefficient of friction, a 
reference yaw rate is further determined, additionally 
representing a threshold value for the physically possible yaw 
rates. The control also prevents that this threshold value is 
exceeded. 

[0043] In addition, an ESP system generally comprises sensors 
which sense the current conditions of the actuators of the system. 
Thus, typical ESP systems comprise, for example, a pressure sensor 
for sensing a brake pressure in the master brake cylinder if the 
vehicle is equipped with a hydraulic brake system. Other ESP 
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systems are additionally equipped with pressure sensors for 
sensing the brake pressures in the individual wheel brakes. 

[0044] The embodiment of the invention that will be described 
hereinbelow is based on an omission of the yaw rate signal, 

[0045] The yaw rate iy is reproduced corresponding to the method 
of the invention in a process model by the variables whose values 
are measured by the remaining sensors. 

[0046] In this model formed by way of the variables 6, a LA T/ v FL , 
v FR , v rl , v rr and p, the actual value y> EST of the yaw rate y/ is the 
result of the measured values of the prevailing sensors by a 
correlation of the form ^ EST = y/ EST (5, a L AT, v FL , v FR , v RL , v RR ; p) and is 
compared with a nominal value which is also determined by way of 
the values of these variables. 

[0047] In front-wheel driven vehicles, the substitute signal 
if/ EST can be determined from the relation 

Vest = c i( v rr " v rl)~ c 2 * a LAT * v ref 

where ci and C2 are vehicle parameters and v REF designates the 
reference speed of the vehicle being produced from the variables 
v FL , v FR , v RL and v RR . 

[0048] Accordingly, 

^est = c i (v FR - v FL ) -c 2 • a LAT • v^p 
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applies for rear-wheel driven vehicles. The noise of the signal 

if/ £<jy can be reduced by appropriate signal processing. Likewise, the 

phase variations of the individual signals are adapted to one 
another by an appropriate filtering operation. As this occurs, the 
filtering operation should be executed in such a fashion that the 
phase variation of the substitute signal ^ EST corresponds to the 
actual phase variation of the yaw rate y/ to the best possible 
extent. In the absence of a yaw rate sensor, this can be done by 
way of data of a reference model. 

[0049] When the substitute signal ^ EST determined this way in 
the model is introduced as a substitute of a measured yaw rate 
signal \j/ into a means for implementing an ESP control algorithm, 
driving dynamics control without a yaw rate sensor can be 
performed in a simple fashion. 

[0050] However, a high degree of interference liability of the 
control system must be expected, which becomes apparent from a 
frequent occurrence of undesirable control interventions. To 
correct measuring signals affected by interference effects and to 
avoid erroneous control interventions, it is possible to take the 
measures being described in the following. 

[0051] To the extent possible, additional status information is 
taken into account in order to detect faults of the variables used 
to produce the signal y/ EST . When it is thereby rendered possible to 
determine the time variation and the extent of a fault, its 
influence on the signal y/ ESJ can be compensated directly. 
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[0052] If, for example, the signal representative of the value 
of the lateral acceleration a^T is distorted due to a gradient of 
the roadway by a known amount Aa^x, bank/ the relation 

V'eST =C l( V FR ~ V Fl)~ C 2 *( a LAT ~~ ^ a LAT.BANK ) ' V REF 

allows determining a corrected signal y/ EST . A lateral inclination 

of the roadway can then be detected because the wheel speeds, the 
lateral acceleration, or the steering angle can be determined at 
the same time by means of different measuring systems and/or 
models based on different physical methods, and their different 
variables which are caused due to errors in the inclined curves 
are used to detect he laterally inclined curve. 

[0053] Similarly, it is also possible to compensate variations 
of the vehicle parameters ci and C2, which are e.g. induced by a 
modified loading of the vehicle, provided that the deviations 
could be identified by an appropriate algorithm. 

[0054] Further, there is a frequent occurrence of faults which 
are caused by the control system itself or can be affected by it. 
Generally, the time variation rather than its extent is known for 
these faults. 

[0055] When e.g. one or more of the wheel brakes of the vehicle 
are actuated, the values for the wheel speeds v FL , v FR , v RL and v RR 
measured by wheel speed sensors do not correspond to the actual 
vehicle performance. 

[0056] A like fault of the signals of the wheel speed sensors 
can be actively eliminated in that pressures in the brakes of the 
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rear wheels are reduced, the wheel speed sensors of which deliver 
input signals for the control system. Of course the pressure 
reduction at the rear wheels cannot be requested constantly in 
order to improve the results of measurement, because a major loss 
in the brake output of the vehicle brake system goes along with 
the pressure reduction. 

[0057] Therefore, it is initially determined by way of measuring 
signals which are not affected by any known fault whether a 
situation prevails in which the actual value of the control 
variable, which is calculated in a defined process model by way of 
the known spurious signal, is. required for a possible control 
intervention . 

[0058] This means, when a need for control by the ESP system 
results during braking of a vehicle based on a value for the yaw 
rate y/ that is determined in a process model produced with the 

steering angle 5 and the lateral acceleration a L AT/ an active 
pressure reduction will be performed on the rear wheels. 

[0059] The actual need for control and the values of the 
actuation parameter are then determined based on model 
^est ( a LATf v RL , v RR ;p) comprising the wheel speeds v RL and v RR for a 
front-wheel driven vehicle as soon as it can be assumed due to an 
assessment of additional sensor signals or model calculations that 
the signals of the wheel speed sensors are no longer disturbed. 
This may e.g. be detected depending on a model for determining the 
pressures in the wheel brakes of the rear wheels. 
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[0060] The control takes place after the pressure reduction 
exactly as in the undisturbed case which herein corresponds to the 
unbraked case. 

[0061] Advantageously, an insignificant pressure increase on the 
front axle is achieved in a case of- pressure reduction on the rear 
axle, frequently even without a conscious reaction of the driver, 
that means at a constant pedal force, so that in general no 
deceleration losses will be detected in a case of partial braking. 

[0062] If, although the time variation of a fault is known, it 
is impossible or undesirable to take active influence under 
technical aspects, as has been described in the above, there is 
now as before the possibility of maintaining the control function 
by a temporary employment of a second substitute signal. 

[0063] In case that all the available measuring signals have 
already been taken into consideration in the first model, the 
model used to determine the second substitute signal can only be a 
partial model. 

[0064] Thus, the illustrated case corresponds to the embodiment 
of the method of the invention, wherein the value of the actuation 
parameter is modified situation-responsively depending on at least 
one value determined by way of the additional process model. In 
this event, even the extreme case is realized in which the value 
of the actuation parameter is determined exclusively depending on 
the value established by way of an additional process. 

[0065] If it is desired e.g. in a front-wheel driven vehicle to 
perform an active pressure increase on the rear axle during an 
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understeering situation in order to stabilize the vehicle, which 
pressure increase represents a disturbance for the signals of the 
wheel speed sensors, the form 

^ EST, TEMP = ~ A^EST 
V REF 

can determine a temporary substitute signal ^ ESTiTEMP for the time of 

the brake intervention which can be used as a signal 
representative of the actual value of the control variable for the 
duration of the brake intervention at the rear wheels. The 
actuation parameters are produced by the ESP control from the 
control deviation between the value ^ est ,temp anc * the nominal value 
of the yaw rate \j/ . 

[0066] The variable Ay/ EST in the previous form represents the 
difference between the values of the signal y> EST and of the yaw 

rate signal a LAT /v REF at the point of time of the change-over 
between the two signals and is taken up in the form in order to 
avoid abrupt signal changes during change-over. 

[0067] The temporary substitute signal ^ est ,temp is produced by 
way of a process model which generally does not reproduce the 
vehicle performance with a sufficient rate of accuracy. 

[0068] Therefore, appropriate situation detection is needed to 
detect whether the substitute signal y/ BsrjEMP can be used or which 

of the available substitute signals allows determining reliable 
values for the control variable. To restrict negative consequences 
of the reduced accuracy of the temporary substitute signal ^ EST j EMP , 
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it can prove favorable to limit the duration of a control 
intervention on the basis of the temporary substitute signal in 
order to be able to use the more accurate signal y/ EST again after a 
defined period of time. 

[0069] In addition, faults of the signals are caused by 
deficiencies of the sensors, among which are e.g. noise and signal 
errors, or which are caused by unpredictable changes in the 
ambient conditions. Uneven road conditions can be named as an 
example for such a change. 

[0070] The influence of these faults on the value of the yaw 
rate determined in a model cannot be compensated by the methods 
described before, if neither the magnitude of these disturbing 
effects, nor their time variation is known. Consequently, they are 
genuine disturbances in the sense of the control technique, and 
protection against any control interventions caused by these 
disturbances can be achieved by means of the method of the 
invention . 

[0071] This fact allows executing yaw rate control without a yaw 
rate sensor in a reliable and safe manner. 

[0072] Driving dynamics control without a yaw rate sensor for a 
front-wheel driven vehicle will be assumed for the following 
embodiments. The remaining sensor system shall comprise the 
sensors described hereinabove, while, however, a separate 
illustration of the front-wheel speeds v FL and v FR is omitted. 
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[0073] It shows with respect to the measurement of the wheel 
speeds v FL , v FR , Vrl and vrr that the reference speed Vre F , whose 
value is produced from the measuring signals of four wheel seed 
sensors, can be determined very precisely in almost all driving 
situations and is virtually unaffected by disturbing effects. In 
contrast to this, the determination of the speed difference v RR - 
Vrl contained in the substitute signal ^ EST is based on the precise 
knowledge of the wheel speeds Vrr and v RL of the rear wheels. This 
difference must hence be assessed as interference-prone. 

[0074] To form models which shall be independent of any one of 
the possibly faulty measuring signals, the reference speed v REF and 
the difference v RR -v RL are therefore dealt with like independent 
process variables, and the reference speed v REF can be included in 
each of the models. 

[0075] The abbreviation Av R = v RR - v RL is introduced at this 
point for the speed difference v RR - v RL . 

[0076] A process that shall be controlled by the driving 
dynamics control such as the yaw rate variation for the vehicle 
can be reproduced in models being constructed with the steering 
angle 8, the lateral acceleration a LA T, the vehicle reference speed 
v REF and the rear-wheel speeds v RL and v RR or the difference Av R . 
Variables f whose values are not accessible for a direct 
measurement can consequently be obtained in a maximum model, that 
means a model with the maximum number of variables contained, with 
f = f(8,a L AT/ Av R ) , wherein the dependency on the reference speed 
v REF and the dependency on the vehicle parameters p are not 
illustrated explicitly herein. 
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[0077] First of all, it becomes conspicuous that likewise the 
substitute signal y/ EST is not produced in the maximum model because 

it is calculated independently of the steering angle 5. However, it 
has shown empirically that this reproduction of the yaw rate 
signal iff provides a very reliable value for the yaw rate if/ in the 
majority of driving situations. 

[0078] In addition, the ESP control is principally performed in 
such a fashion that values for the actuation parameters are 
determined depending on the control deviation between the 
substitute signal ^ EST and a nominal value for the yaw rate. In 

this arrangement, the nominal values are obtained from a vehicle 
reference model based on the reference speed v REF and the steering 
angle 5. Thus, the steering angle 5 is also implicitly considered 
in the control by way of the substitute signal y/ BST . 

[0079] Due to the fact that the nominal value is produced by way 
of the steering angle 8, it shall even be preferred to determine 
the actual value by way of a model which is independent of the 
steering angle 8. 

[0080] It is now possible to form different partial models of 
the maximum model which are formed with different quantities of 
process variables, respectively forming a subset of the multitude 
of all measured process variables. Each one of these auxiliary 
models is thus independent of measured values of at least one of 
the sensors of the sensor cluster and, thus, also insusceptible to 
malfunctions of the corresponding sensor. 
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[0081] Corresponding to the previous argumentation concerning 
the signals of the wheel speeds v FL , v FR , v RL and v RR , the auxiliary 
models in the embodiment under review are produced with multitudes 
of variables which are (real) subsets of the quantity {8, a LAT , Av R } . 
In addition, the models can depend on the reference speed v REF . 

[0082] In model 1, the control variable, that means in this case 
the yaw rate if/, is illustrated by a correlation of the form 

f i = f i (5, a lat ) - 

Hence, the model 1 manages without the signal representative of 
the value of the speed difference Av R . 

[0083] In model 2 a relation of the form 

f 2 = f2(a LA T,Av R ) 

is applicable for a control variable so that this model is 
independent of the measuring signal of the steering angle sensor. 

[0084] And finally the measuring signal for the lateral 
acceleration a LA T is excluded in the model 3. This means that 

f 3 = f 3 (5,Av R ) 

applies for the control variable established in this model. It is 
now investigated separately for the models whether there is a need 
for control for the overall system within the models. 

[0085] In the case of model 1 this investigation can be carried 
out e.g. by comparing the stationary yaw rates \f/ h and ^ aLAT . 
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calculated from steering angle 5 and lateral acceleration a^T- This 
means that deviations are determined between the signal 

Va=l !y i- 

for the yaw rate y/ s , where 1 designates the wheel base of the 
vehicle and eg designates its self-steering gradient, and the 
signal 



a LAT 



*lat 

REF 



Vai at 



for the yaw rate , which indicate a need for control when a 

certain threshold value is exceeded. It would, however, also be 
possible in model 1 to compare the value of ^ 3lat with the nominal 
value for the yaw rate y/ determined- by the ESP control by way of 
the steering angle 5 in order to identify a need for control. A 
comparison of the value of with the nominal value is generally 
not preferred, however, because in this case both the nominal 
value and the actual value of the control variable being the basis 
of a possible need for control depend on the measuring signal of 
the steering angle 5. In certain driving situations, however, this 
comparison may also be performed. Besides, several or all of the 
described comparisons may be provided for securing the need for 
control for model 1. 

[0086] For model 2 the sideslip angle p of the vehicle can be 
assessed based on the lateral acceleration a LAT and the wheel speed 
difference Av R by way of the form 
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LAT 



REF 



dt 



[0087] The so determined value for the sideslip angle p, which 
does not depend on the steering angle 8, may then be used to find 
out a need for control. This corresponds to the comparison of the 
signal y> aLAT determined already for the model 1 with the substitute 

signal iy EST in order to find out the need for control. 

[0088] To check the need for control for the model 3, yaw rate 
signals can be compared which are produced from the wheel speed 
difference Av R and the steering angle 5. Thus, a comparison of the 
signal 

8 * V RFF 

Va Vr =c r Av R -c 2 — 

with the signal may be performed in order to find out a need 
for control in case there is a deviation between the two signals 
that exceeds a certain threshold value. Similar to model 1, it is 
likewise possible to compare either the signal ^ AVr or the signal 

y/ b or both signals with the nominal value for the yaw rate y/ 
determined by way of the ESP control. 

[0089] The phase variation of all auxiliary models should be 
adapted to the requirements of the overall system by an 
appropriate signal processing operation, in particular an 
appropriate filtering operation. 



API 0704 



22 



[0090] In addition, an evaluation of the need for control in the 
individual partial models should be supplemented by situation 
detection. The quality of the individual models in a defined 
situation can be detected in a way as has been explained already 
hereinabove by way of the example of at least qualitatively 
recordable disturbances such as a roadway inclination or a brake 
intervention. Further, a vehicle reference model is implemented 
into the control system and allows the situation detection system 
to find out which models describe the vehicle performance in a 
situation with a sufficient rate of accuracy. 

[0091] The control logic of the illustrated yaw rate control 
without a yaw rate sensor must now be slightly extended compared 
to the standard control logic of the control system including a 
yaw rate sensor. 

[0092] Initially it is found out by the standard control logic 
whether the entry conditions for a control intervention are 
fulfilled due to a control deviation between the substitute yaw 
rate signal if/ EST and the nominal value of the yaw rate y/ . 

[0093] All auxiliary models are, however, evaluated prior to the 
commencement of the control intervention, as has been described 
hereinabove. It will be decided only after this evaluation whether 
an unlimited control intervention, a limited control intervention 
or, possibly, no control intervention at all will be performed. 

[0094] An unlimited control operation is only permitted when 
there is a need for control both due to the value of the 
substitute signal y> EST and in all auxiliary models. The control 
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intervention is executed in this case, in particular as regards 
its duration and intensity, like in the case of conventional 
driving dynamics control with a yaw rate sensor. 

[0095] If need for control does not prevail in all auxiliary 
models, this fact leads to assume that one of the input signals is 
disturbed and that possibly there is in fact no situation that 
requires a control intervention. Due to the limited information 
based on which the yaw rate signal is produced within the process 
models, it is, however, also possible that in fact there is no 
signal fault and, hence, there is need for control. 

[0096] Therefore, a control intervention is performed even if 
there is a need for control not for all the models, yet for the 
majority of the models. In this case, however, a limited control 
intervention is performed in order to reduce the effects of an 
erroneous control intervention for which there is a certain, 
finite probability in this case. 

[0097] As this occurs, the control intervention is limited in 
its duration and/or in its intensity depending on the models 
indicative of a need for control. 

[0098] When e.g. model 1 as the only model does not show a need 
for control, only pressure requests up to a maximum of 15 bar for 
the brake pressure are admitted. When, on the other hand, model 2 
is the only model for which no need for control exists, the 
control logic will allow only control interventions of a maximum 
duration of 300 ms . 
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[0099] When, finally, a need for control exists only for a small 
number of models, it is very likely that a measuring signal is 
disturbed. A control intervention will be totally suppressed in 
this case. 

[0100] The disclosed principle of the combined consideration of 
standard logic and auxiliary models is illustrated in the only 
Figure by way of sectional areas of four circles. Circle 10 
represents the standard logic of the ESP system on the basis of 
the substitute signal if/ EST , wherein a need for control for the ESP 
system exists for the conditions of the system being represented 
by points within the circle 10. 

[0101] In a similar fashion, the circle areas 20, 30 and 40 
represent a need for control for the models 1, 2 and 3. 

[0102] The different coloring of various segments illustrates in 
the Figure under which conditions a control intervention is 
performed. The light grey sections represent limited control 
interventions and the dark grey section represents unlimited 
control interventions . 

[0103] Based on this logic, the invention renders it possible to 
avoid erroneous control interventions and identify and perform 
necessary control interventions with a high degree of reliability. 
In particular the ability to perform limited control interventions 
proves to be a favorable compromise which takes into consideration 
the probability distribution of the occurrence of disturbed 
measuring signals . 
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[0104] This condition is also supported by the observation that 
control cycles with limited control interventions frequently 
appear directly before or after an unlimited control because a 
need for control is detected too late and/or is reset too early in 
some process models. In general, this does not lead to a 
significant reduction of the control quality so that the 
functionality of a control system is maintained in almost the same 
standard compared to the functionality of a control system will a 
complete sensor system. 

[0105] The disclosed control logic achieves an inappropriate 
control only if due to a signal fault no need for control has been 
detected for the overall system, however, in fact there is a need 
for control. 

[0106] In this case, the models can be evaluated, however, by 
way of situation^ detection in order to determine which of the 
measuring signals is disturbed. It has been illustrated in this 
respect in the above-mentioned example that a disturbance of the 
wheel speeds v FL , v FR , v RL and v RR is detected by way of a brake 
intervention. 

[0107] A change-over for a limited time to a substitute signal, 
as described above, is then possible in the event of trouble in 
the wheel speed sensors, e.g. a change-over to the signal ^est.temp - 

[0108] This mode, in which a change-over between several 
substitute signals is possible, in particular allows not having to 
instantaneously stop an already active control cycle when trouble 
occurs. However, as it is no longer possible to protect the 
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signals after a change-over to a different signal, it is suitable 
to limit the extent and duration of the control request. 

[0109] Thus, the invention provides a favorable method of 
controlling a process which permits producing a substitute signal 
for an omitted or failed sensor signal, which substitute signal is 
introduced into the existing standard control logic. To the extent 
possible, recordable faults of the substitute signal are 
compensated or eliminated; alternatively, a momentary change-over 
to another temporary substitute signal is carried out. 

[0110] Beside the first process model in which the substitute 
signal is produced, additional process models are constructed for 
which a need for control is individually checked. After evaluation 
of these models a decision is taken whether control requests are 
realized in an unlimited manner, or whether intensity and/or 
duration of the interventions are limited, or whether a control 
intervention is totally suppressed. Thus, erroneous control 
interventions due to non-recordable faults are effectively 
prevented, or limited in their effect, respectively. 
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List of Reference Numerals: 



a LAT lateral acceleration 

P sideslip angle 

Ci . vehicle parameter 

c 2 vehicle parameter 

5 steering angle 

eg self-steering gradient 

fi substitute signal for the control variable signal 
in model 1 

f 2 substitute signal for the control variable signal 
in model 2 

f 3 substitute signal for the control variable signal 

in model 3 

1 wheel base 

p vehicle parameter 

y/ yaw rate or yaw rate signal 

iff substitute signal for the yaw rate signal 

est, temp temporary substitute signal for the yaw rate signal 

y/ 6 yaw rate determined by way of the steering angle 

^lat y aw rate determined by way of the lateral 

acceleration 

A^est difference between yaw rate signals 

v FL wheel speed of the left front wheel 

v FR wheel speed of the right front wheel 

v RL wheel speed of the left rear wheel 

vr R wheel speed of the right rear wheel 

v REF reference speed 

Av R difference v RR - v RL 
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10 circle, the area of which represents the need for control 

due to the substitute signal for the control variable signal 

20 circle area representing the need for control for the model 
1 

30 circle area representing the need for control for the model 
2 

40 circle area representing the need for control for the model 
3 
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